JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.191.144.138

196.191.144.138 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 38%: ?

38%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	🇪🇹 Ethiopia
City	Awasa, Sidama Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.191.144.138

Whois 196.191.144.138

IP Abuse Reports for 196.191.144.138:

This IP address has been reported a total of 30 times from 20 distinct sources. 196.191.144.138 was first reported on September 20th 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-09-19 16:06:32 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 12:49:33 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 196.191.144.138 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 196.191.144.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 08:49:29.706261 2026] [security2:error] [pid 5815:tid 5815] [client 196.191.144.138:36375] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|smart1services.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "smart1services.com"] [uri "/"] [unique_id "aqvh2aa-mE9VjRQWSqIqKwAAAAI"], referer: https://bulkdacheckeronline.online/dir/organic-visibility-backlinks-192377 show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-12 11:35:23 (1 week ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇺🇸 RAP	2026-09-12 07:22:54 (1 week ago)	2026-09-12 07:22:54 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 gui-ying233	2026-09-11 19:57:38 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-04 07:25:33 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 el-brujo	2026-08-27 17:46:07 (3 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 kosada.com	2026-08-27 10:40:09 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-17 00:39:07 (1 month ago)	Distributed scraper residential proxy pool — www.laxwineandspirits.com /store/filtered/ (WineCommerc ... show more Distributed scraper residential proxy pool — www.laxwineandspirits.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-10 11:00:31 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-31 00:12:07 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 196.191.144.138 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 196.191.144.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 20:12:00.295909 2026] [security2:error] [pid 2166114:tid 2166131] [client 196.191.144.138:41639] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 196.191.144.138 (+1 hits since last alert)\|whitecrosslibrary.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "whitecrosslibrary.com"] [uri "/xmlrpc.php"] [unique_id "amvoUL54WipvRexalmx4TgAAAI8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-26 00:41:53 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 dispaisyenterprises	2026-04-30 17:41:34 (4 months ago)	Honeypot [fra-de-honeypot]: Unauthorized connection attempt detected on 23/TELNET Reported by DisPai ... show more Honeypot [fra-de-honeypot]: Unauthorized connection attempt detected on 23/TELNET Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Port Scan
🇮🇹 A000Z	2026-03-14 05:50:57 (6 months ago)	Fail2Ban: 196.191.144.138 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 196.191.144.138 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-01-12 08:11:32 (8 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇩 185.181.41.120

🇹🇼 175.97.207.27

🇺🇸 172.190.216.105

🇮🇩 160.22.126.54

🇧🇩 151.158.44.55

🇧🇷 138.186.196.48

🇳🇱 109.160.32.31

🇮🇳 103.104.112.8

🇵🇹 92.250.103.58

🇺🇸 66.132.195.29

🇲🇽 187.245.215.114

🇺🇸 162.243.213.82

🇺🇸 142.202.189.81

🇨🇳 113.108.122.171

🇨🇳 106.12.38.73

🇲🇲 103.23.135.183

🇹🇼 101.13.5.26

🇷🇴 92.118.39.49

🇺🇦 91.215.144.86

🇺🇸 71.6.245.245